Lucene search

K
cvelistRedhatCVELIST:CVE-2012-2374
HistoryMay 23, 2012 - 8:00 p.m.

CVE-2012-2374

2012-05-2320:00:00
redhat
www.cve.org

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%